CVSS 3.1 Score 7.4 of 10 (high)


Published Jan 23, 2024
Updated: Feb 6, 2024
CWE ID 203
CWE ID 208
CWE ID 385


CVE-2024-23342 is a vulnerability in the ecdsa PyPI package, specifically affecting versions 0.18.0 and prior. This package is a Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA, EdDSA, and ECDH. The vulnerability, known as the Minerva attack, has no known patched version available at the time of publication. It poses a high risk to organizations as it has a base severity rating of HIGH and could result in the exposure of sensitive information due to its impact on integrity and confidentiality. The vulnerability can be exploited remotely without requiring any privileges or user interaction. The attack vector is through the network, and the availability impact is considered to be none.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-23342 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options